siwecos.de

What It Is

SIWECOS is a German online security-checking project aimed at websites for small and medium-sized businesses. The text says it offers a quick homepage scan in the Free version, as well as a registered Pro version. Its checks cover TLS, DOM XSS, information leakage, HTTP security headers, and suspected phishing, spam content, and malware. One important caveat: the top of the page clearly states “SIWECOS-Service ist eingestellt,” meaning the service has been discontinued and further information is pending. As a result, its current availability should be considered highly uncertain.

Core Capabilities and Management

In terms of protection type, SIWECOS is more of an external website security scanner and baseline-checking tool than a runtime protection platform. The TLS Scanner can check certificate validity, hash functions, weak cipher suites, weak protocol versions, and risks such as CRIME, Sweet32, Poodle, and Heartbleed. The Header Scanner covers CSP, HSTS, X-Content-Type, X-Frame, and more. The Info Leak Scanner can identify CMS platforms, risky CMS plugins, insecure JavaScript libraries, and publicly readable email addresses and phone numbers. Pro also supports daily checks for up to 25 domains, automatic notifications when critical vulnerabilities are found, website seal generation, an overall score, and full reports.

WebHoster Use Case

The text also introduces a service for WebHosters: when critical CMS security updates are released, CMS security teams and hosting providers collaborate to develop filtering rules, allowing hosts to filter specific attack requests through a firewall before customers have applied updates in time. This model can help small and medium-sized hosting providers compensate for limited in-house CMS security rule development capabilities. However, the main text does not explain the actual delivery format, APIs, supported CMS list, or whether the service is still available today.

Pricing and Compliance

For pricing, the page clearly states that SIWECOS is completely free, with both Free and Pro offered at no cost. The value of Pro lies in multi-domain support, daily scans, and alerts. However, the fact that the service has been discontinued significantly weakens any claimed cost-effectiveness. Compliance certifications, SLA, data processing, privacy compliance, APIs, enterprise integrations, and payment methods are not disclosed in the main text.

Pros, Cons, and Who It’s For

The advantages are that it is free and its checks cover common website risks, making it especially suitable for small and medium-sized businesses that need a basic security health check. The drawbacks are that the service has been discontinued, its capabilities focus more on detection than remediation, and it lacks enterprise-grade operational information. If you only want to learn about the dimensions of website security testing, SIWECOS’s feature list is still useful as a reference. If you need continuous monitoring in a production environment, you should choose an actively maintained alternative.

Access from China

The main text does not provide information about access from mainland China, a Chinese-language interface, or payment options, so access status can only be marked as unknown. Users in China may consider SSL Labs, Mozilla Observatory, SecurityHeaders, or security health checks, WAF, and vulnerability scanning services from domestic cloud providers as alternatives.